Re #640 Add an upper bound on crypton

[mpilgrem]

See:

• Use cryptohash-sha256, not crypton, for SHA256 hashes #640
• Hpack doesn't build (due to recent memory -> ram changes?) #641
• replace memory with ram snoyberg/http-client#573

The immediate problem is that direct dependency http-client-tls <= 0.3.6.4 does not support newly-released crypton-1.1.0 (an indirect dependency of hpack) but does not, itself, specify an upper bound on crypton.

[sol]

As this fixes the build this is fine with me.

[sol]

I guess we also need corresponding Hackage revisions. I think you already have the appropriate permissions. Do you wanna take care of this as well?

[mpilgrem]

@sol, for the hpack-0.39.* packages on Hackage with a crypton dependency, I have edited the Cabal file to specify crypton < 1.1. hpack-0.39.2 did not have a direct dependency on crypton, so a Cabal file revision is not possible.

[mpilgrem]

@sol, the CI is green but the publish job fails (I think because indexed-traversable-0.1.4 does not yet recognise that it supports GHC 9.14.1/base-4.22.0.0). Should I release manually?